Easy to remember
Real words tell a little story in your head. A quick mental picture of a maple, a river and some cocoa sticks far better than random symbols.
A passphrase is a handful of ordinary words strung together — like
maple-river-cocoa-lantern. It's far harder for a computer to guess than
P@ssw0rd1, yet a whole lot kinder to your memory.
Everything happens in your browser — your passphrase never leaves your device.
Think of it like a friendly guardian for your accounts: tough on the outside, easy for you to recognise.
Real words tell a little story in your head. A quick mental picture of a maple, a river and some cocoa sticks far better than random symbols.
Length beats complexity. Four random words from a long list create billions of billions of possibilities — more than enough to stop modern guessing attacks.
The generator runs entirely on your computer or phone. We have no servers collecting your passphrases — there's simply nothing to send and nothing to leak.
Yes — for most people, by a wide margin. What protects you is the number of possible combinations, and length adds those much faster than swapping letters for symbols. A four-word passphrase from a large word list is both stronger and easier to recall than something like Tr0ub4dor&3.
No. The generator is plain JavaScript that runs in your browser. Nothing is uploaded, logged or saved on our side. You can even turn off your internet connection after the page loads and it will keep working.
Four is a great everyday default. For your most important accounts — email, banking, your password manager — bump it up to five or six. The strength meter updates live so you can see the difference.
Absolutely. The smartest combo is a strong passphrase for your password manager and email, then let the manager remember everything else. We explain this gently in Passphrases Made Easy.
It takes about ten seconds, it's free, and nothing leaves your device.